Using Defender with multiple domains

  • Resolved Nu Ad Agency

    (@nuadagency)


    3 years ago

    Hi Team,

    I’m popping by with another question. This time regarding use of Defender in a multi domain environment.

    We’ve been using Defender on some sites that are configured using Polylang’s URL modifications set to “language per different domains”, like described here.

    The issue we’re facing is that Defender’s protection actually prevents switching language (within the admin panel), and CORS rules instantly jump in. The simplest workaround is to turn off Defender for the time of making changes to different languages, which obviously is a bit hazardous.

    Is there any built in function we can hook into to tell Defender that what we’re doing should be allowed? Any hints on how to approach this?

    Kind regards!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Laura – WPMU DEV Support

    (@wpmudev-support8)

    3 years ago

    Hi @nuadagency

    I hope you’re well today!

    I’m a bit surprised by the CORS issue here as Defender shouldn’t be causing it. I understand that disabling Defender not only makes the language switcher works but also fixes the CORS error, right?

    There is one known compatibility bug with Polylang that may possibly be related here but it’s only related to specific option. Do you have “Mask Login Area” option enabled in Defender?

    If yes, please try disabling this option and see if it solves the problem.

    If it doesn’t fix it (or you are not using this function), please also try disabling security headers in “Defender -> Tools -> Security Headers” section temporarily.

    If none of that is the case, let us know here, please, and we’ll do some more testing on our end to troubleshoot it further.

    Best regards,
    Adam

    Thread Starter Nu Ad Agency

    (@nuadagency)

    3 years ago

    @wpmudev-support8 Hi, thanks for the info.

    Yes, our current workaround involves turning off the login mask – which seems to confirm the issue with Polylang you mentioned. Any idea on a possible fix? It’s more dependent on your or Polylang team?

    As for the CORS, it seems changing our htaccess rules fixed them, therefore we can conclude it had more to do with server settings than your plugin. If anything else arises I’ll let you know.

    Let us know regarding the login mask issue. 🙂

    Plugin Support Patrick – WPMU DEV Support

    (@wpmudevsupport12)

    3 years ago

    Hi @nuadagency

    I hope you are doing well.

    Thank you for confirming.

    Unfortunately, this is a conflict between both plugins and we don’t have a workaround on the Defender side, the Defender team was already reported but we don’t have an ETA to implement the fix, you can contact Polylang and see if they have any similar situation but I believe it depends on the Defender release.

    You can subscribe to our roadmap to receive updates about our releases:

    https://wpmudev.com/roadmap/

    https://wpmudev.com/roadmap/#defender

    Best Regards
    Patrick Freitas

    Plugin Support Amin – WPMU DEV Support

    (@wpmudev-support2)

    3 years ago

    Hello @nuadagency ,

    We haven’t heard from you for some time now, so it looks like you don’t require our further assistance.

    Feel free to re-open this ticket if needed.

    Kind regards
    Kasia

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Using Defender with multiple domains’ is closed to new replies.